Skip to content

Customer Access Token was missing in the getRoute Request #2325

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: canary
Choose a base branch
from

Conversation

thebigrick
Copy link
Contributor

What/Why?

When requesting route information, Catalyst does not send the Customer Access Token. If - for example - a category were hidden from the user, they would still see it.

Testing

  • Create a customer group
  • Assign a customer to it
  • Mark a category as hidden for the customer group
  • Browse the category as a user belonging to another group: You should see it
  • Browse the category as the customer belonging to the group you created: You should not see it

When requesting route information, Catalyst does not send the Customer Access Token. If - for example - a category were hidden from the user, they would still see it.
@thebigrick thebigrick requested a review from a team as a code owner May 21, 2025 07:04
Copy link

changeset-bot bot commented May 21, 2025

🦋 Changeset detected

Latest commit: 055b35c

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
@bigcommerce/catalyst-core Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

Copy link

vercel bot commented May 21, 2025

@phoenix128 is attempting to deploy a commit to the BigCommerce Platform Team on Vercel.

A member of the Team first needs to authorize it.

Copy link
Contributor

@chanceaclark chanceaclark left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just a little changeset adjustment, but thanks for catching this!

"@bigcommerce/catalyst-core": patch
---

FIX missing support for routes permissions
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
FIX missing support for routes permissions
Add `customerAccessToken` when fetching the route url.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants